Cyber Data Engineer

Job#: 2039306

Job Description:

Title: Cyber Data Engineer
Location: 100% onsite at Lackland Air Force Base - San Antonio, TX
Schedule: Monday through Friday 8am-5pm
Job Type: 12 month contract to hire
Openings: 2
 
Certification/Minimum Requirements:

• 3+ years of relevant work experience
• At minimum, Bachelors degree in relevant field
• Active TS/SCI clearance
• Certifications Requirements: One of the following IAT Level III 8140 Certification (CISA, GSE, SCNA, CISSP, or GCIH)
• You must have either have the GIAC Certified Forensics Analyst (GCFA) or GIAC Certified Forensic Examiner (GCFE) certification or able to acquire within 120 days of onboarding

• Conducts software and systems engineering to develop new capabilities, ensuring cybersecurity is fully integrated across the enterprise.
• Writes and develops scripts to automate the system installation of required patches and configurations to remediate identified system vulnerabilities.
• Performs coding and development as required to augment default SIEM functionality and facilitate the intercommunications of various security controls.
• Develops basic new cybersecurity capabilities.
• Ensures critical data feeds and hosts are sending data.
• Develops, debugs, and maintains scripting languages.
• Assists/leads in conducting cybersecurity audits to ensure appropriate implementation and compliance of the security posture.

• Proficient with Splunk Processing Language (SPL), ELK Lucene Query Syntax, or another search/analytics tool.
• Proficient with programming/scripting fundamentals – including regex, C++, Python, RHEL, Unix Scripting, and Windows PowerShell.
• Linux+/Red Hat; RHEL 7.
• More than three (3) years of relevant work experience, including experience in responding to security problems in target?rich environments, looking at security alerts, front?line analysis, and response.
• Understanding of SIEM “Search” Language & Lucene Query Syntax.
• Understanding of SIEM Dashboard, Reports, Lookup Tables, and Summary Indexes.
• Knowledge of how to customize Dashboards via the XML source.
• Experience with SIEM Apps and ELK.
• Experience with Python Scripting.
• Programming experience in Python, C/C++, Java, or Go.
• Demonstrated expertise with malware analysis, including investigations of botnet and root?kit behavior.
• Familiarity with information security concepts (OWASP Top 10, CVEs, IoCs, TTPs, Cryptography).
• Network Security Devices (IDS/IPS, NGFW, WAF, NGAV).
• OSSEC, Snort, Suricata Experience.
• Experience with at least one SIEM i.e., AlienVault, Logrhythm, Splunk, Qradar, ELK, and Firewalls such as Fortinet, Sonicwall, and Palo Alto.
• Scanning technologies, Log collection, and analysis tools (SIEM).
• Experience with Scripting/Programming Languages (BASH, Python, Java, etc.).
• Extensive knowledge of MITRE ATT&CK framework, and its uses within the cybersecurity community (e.g., Open?Source projects).

EEO Employer

Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation in using our website for a search or application, please contact our Employee Services Department at [email protected] or 844-463-6178.